Compare Privacy and Protection Strategies DA0-001 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is a key difference between symmetric and asymmetric encryption?

   • ASymmetric is always stronger than asymmetric
   • BAsymmetric is faster than symmetric for bulk data
   • CSymmetric uses one key; asymmetric uses a pair of keys
   • DSymmetric is used only for digital signatures
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A software company is designing a secure file-sharing system. They need to encrypt files so that any user in the company can encrypt a file for any other user, but only the intended recipient can decrypt it. They also want to minimize the performance impact of encrypting large files. Which hybrid approach should they use?

   • AGenerate a random symmetric key for each file, encrypt the file with that key, and encrypt the symmetric key with the recipient's public key.
   • BUse a single company-wide symmetric key to encrypt all files and share it with all employees.
   • CEncrypt the file with a symmetric key and send the symmetric key to the recipient over a separate, unencrypted channel.
   • DEncrypt the entire file with the recipient's public key using asymmetric encryption.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security administrator is managing encryption keys for a large enterprise. They have implemented a key rotation policy that requires keys to be rotated every 90 days. However, the administrator is concerned about the risk of data loss if a key is rotated and the old key is deleted before all data encrypted with it is re-encrypted. Which practice should be implemented to mitigate this risk?

   • ARe-encrypt all data with the new key before rotating, but do not keep a backup of the old key.
   • BUse the same key for all data and never rotate it to avoid the risk of data loss.
   • CMaintain a key version history and retain old keys for a period that covers the maximum data retention period.
   • DDelete the old key immediately after the new key is created to ensure only the current key is in use.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A call center application queries a customer database to display information to agents. The company wants to show agents the last four digits of a customer's social security number but hide the rest, without storing a separate masked copy of the data. Which approach should be used?

   • ACreate a new column in the database that stores the masked SSN and update it whenever the original changes.
   • BEncrypt the SSN column and provide the call center agents with the decryption key.
   • CUse a view that selects only the last four digits of the SSN and grant agents access to the view instead of the base table.
   • DImplement dynamic data masking on the SSN column, defining a mask that shows only the last four characters for the 'Call Center Agent' role.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which encryption technique uses a single shared secret key to both encrypt and decrypt data?

   • ASymmetric encryption
   • BAsymmetric encryption
   • CHashing
   • DTokenization
   Reveal Solution Discussion Select an answer first